{ lib, config, ... }:

{
  networking.firewall.allowedTCPPorts =
    let
      port = config.services.tor.relay.port;
    in
      lib.optional (lib.isInt port && port > 0) port;

  services.tor.enable = true;

  services.tor.relay.accountingMax =
    lib.mkDefault (throw "Set tor accountingMax!!");

  services.tor.relay.accountingStart =
    lib.mkDefault (throw "Set tor accountingStart!!");

  services.tor.relay.enable = true;
  services.tor.relay.contactInfo = "hi@alyssa.is";
  services.tor.relay.nickname = lib.mkDefault config.networking.hostName;
  services.tor.relay.port = 143;
  services.tor.relay.role = "relay";
}